PT-2026-110911
CVE-2026-92116
·
تاريخ النشر
2026-10-12
·
تاريخ التحديث
2026-10-16
الوصف من
CVSS 3.1
9.1
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Apache Allura versions prior to 1.22.0
Description
Apache Allura contains a flaw where OAuth1 callback validation is missing. This occurs when the system fails to properly verify the callback URL during the OAuth1 authentication process, which could allow an attacker to redirect users to a malicious site.
Recommendations
Upgrade to version 1.22.0.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾